persist misp sessions in redis db

[garrit-schroeder]

Configure fpm php.ini to use redis for persisting sessions.
This will allow to scale MISP horizontally.

[coolacid]

I'm wondering if everyone runs REDIS with their MISP builds - Maybe this should be configurable via ENV variables instead?

[chrisinmtown]

AFAIK the Redis server is required bcos that's where MISP caches (not fetches) data to analyze and report correlations. I suppose if you have caching completely turned off you MIGHT get away with not running Redis, but I have never tried it.

[garrit-schroeder]

When you install MISP in the official way you install redis tooe. Why not in docker as well?
Additionally we should think about security. Currently redis is not setup to use authentication.

[coolacid]

The included docker-compose is a quickstart function. One would hope a prod deployment is customised to the entity running the project.

Also, Redis doesn't have security. It has a password, which is all but useless.